Add GHApp

[tr4l]

On Github, you have GitHub App (and installation), that allow you to interact with several API.

Apps have permissions, and different way to authenticate:

• The app
• An installation of the app
• App with Oauth user (never use this one, so it's not clear for me)

Reference:

• https://docs.github.com/en/apps

[jaredcatkinson]

I think this is the long term solution to collection. I've found that certain API endpoints (e.g. https://docs.github.com/en/rest/orgs/personal-access-tokens?apiVersion=2022-11-28) are only accessible to Apps. I also assume that because an app will be more tightly integrated that will be useful. I'll look into this and see what I can do.

[tr4l]

Oh, nice.
But I didn't mean "using app for collection", which is very good (and you can get a ghApp token and use it with the actual script.(*)

I mean "collection ghApp and permission associated.
This is a blind spot on GH, and only recently a GHApp can have more than one admin.

(*): github app token are valid one hour.

[jaredcatkinson]

Ah that makes sense as well. I will do a little research into Apps and start adding support!

[jaredcatkinson]

Is it true to say that an app is essentially a defined class and an installation is the instantiation of that app in a user or organization context?

[tr4l]

I understand it that way.
That's why you need to get app authentification, then with this authentification you can list your own installation. Then get a token for that instance/authentification.

The first authentification is done by forging a jwt with your own private key.

(However, they are other flow I don't really used)